CVE-2019-15392

CVE-2019-15392 affects the Asus ZenFone 4 Selfie. A pre-installed app with package name com.log.logservice (version 1) exposes an exported interface that allows any co-located app to modify a system property without proper authorization. This is a local issue (attack vector: local) enabling integ...